Vulnerabilities > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-04-03 | CVE-2007-1832 | Remote Security vulnerability in WebAPP web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to upload certain files (1) via a crafted filename or (2) by "using percent encoding in forms." | 5.0 |
| 2007-04-03 | CVE-2007-1831 | Remote Security vulnerability in WebAPP web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write "wrong data" via a crafted QUERY_STRING. network web-app-org | 6.0 |
| 2007-04-03 | CVE-2007-1830 | Cross-Site Scripting vulnerability in Web-App.Org Webapp 0.9.9.6 Unspecified vulnerability in the Username Hijacking Patch 20070312 for web-app.org WebAPP 0.9.9.6 allows remote attackers to obtain administrative access via unknown vectors, related to "something overlooked in the original that was still overlooked in the patch", and possibly related to copying files to the user-lib and the "XSS and cookies exploit." network web-app-org | 4.3 |
| 2007-04-03 | CVE-2007-1827 | Remote Security vulnerability in WebAPP Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to corrupt data files, gain access to private files, and execute arbitrary code via "certain characters." network web-app-org | 6.0 |
| 2007-04-03 | CVE-2006-7190 | Unspecified vulnerability in Web-App.Net Webapp 0.9.9.6 Cross-site scripting (XSS) vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the viewnews function, related to use of doubbctopic instead of doubbc. network web-app-net | 4.3 |
| 2007-04-03 | CVE-2006-7189 | Unspecified vulnerability in Web-App.Net Webapp 0.9.9.6 Cross-site scripting (XSS) vulnerability in cgi-bin/admin/logs.cgi in web-app.net WebAPP before 20060403 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the Statistics Log Viewer. network web-app-net | 4.3 |
| 2007-04-03 | CVE-2006-7188 | Unspecified vulnerability in Web-App.Net Webapp 0.9.9.6 The search function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to read internal forum posts via certain requests, possibly related to the $info{'forum'} variable. | 5.0 |
| 2007-04-03 | CVE-2006-7187 | Unspecified vulnerability in Web-App.Net Webapp Cross-site scripting (XSS) vulnerability in the show_recent_searches function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to inject arbitrary web script or HTML via the srch variable. network web-app-net | 4.3 |
| 2007-04-03 | CVE-2006-7186 | Unspecified vulnerability in Web-App.Net Webapp cgi-lib/subs.pl in web-app.net WebAPP before 0.9.9.3.5 allows attackers to open list files in "profile and other functions," a different vulnerability than CVE-2005-0927. | 5.0 |
| 2007-04-02 | CVE-2007-1824 | Buffer Overflow vulnerability in PHP 5 PHP_Stream_Filter_Create() Function Buffer overflow in the php_stream_filter_create function in PHP 5 before 5.2.1 allows remote attackers to cause a denial of service (application crash) via a php://filter/ URL that has a name ending in the '.' character. | 5.1 |